CVE-2024-28741

This PoC exploits CVE-2024-28741, a stored XSS vulnerability in NorthStar C2, by sending multiple malicious agent registration requests to build a JavaScript payload in the logs web page, enabling remote command execution on NorthStar C2 agents.

This Metasploit module exploits a stored XSS vulnerability in NorthStar C2 (CVE-2024-28741) to achieve unauthenticated session hijacking and subsequent remote code execution on compromised agents. The exploit chains XSS with agent command execution to run arbitrary payloads.